Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File:                     4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier:          b5pK0rsfvRq2byKKhXYvxX0eY9iScebXZO9YIE9Jf9g=
Subject key identifier:   1F:B2:49:53:8D:25:CE:68:B1:7A:13:13:B1:FD:B9:4C:5A:20:13:23
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer:       /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial:       1FCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number:          1FC3
Signing time:             Tue 18 Aug 2026 16:05:57 +0000
Manifest this update:     Tue 18 Aug 2026 16:05:56 +0000
Manifest next update:     Tue 25 Aug 2026 16:05:56 +0000
Files and hashes:         1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: gwmHirT7UVYFzcsrb1AHgIRGyZ3rgxrT/78DXS/fXoE=)
                          2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: uDJZMcFCbLQlSQcLSBZkCu6SX9omctyPQYO3XpjloA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8143 (0x1fcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
        Validity
            Not Before: Aug 18 16:05:56 2026 GMT
            Not After : Aug 25 16:05:56 2026 GMT
        Subject: CN=6a8482e5-b51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:6e:f7:ed:94:97:5a:38:2a:a7:86:49:7c:
                    d0:06:2c:09:09:1e:9e:bf:4a:cd:c6:99:e4:6f:2b:
                    ca:7f:25:d2:91:24:6d:26:97:56:f6:51:f3:b9:c8:
                    4b:a3:c8:00:c1:0f:2a:33:cd:30:13:a7:8e:54:56:
                    ec:f9:c8:69:91:59:47:b8:05:b4:87:ca:0d:41:d9:
                    9f:9d:0c:72:bf:a6:92:16:74:19:75:39:95:4e:33:
                    d5:38:3b:12:ab:6b:63:53:51:90:36:65:87:28:29:
                    b9:f5:3b:e0:5f:c7:ce:e7:97:54:01:30:e4:c4:e9:
                    d1:e8:2d:c4:e3:e7:37:cf:5a:f3:2e:7d:6b:4c:59:
                    ee:1c:d4:da:84:68:0e:60:a3:07:3f:a8:91:21:af:
                    61:6e:5d:f8:ac:57:0d:8a:8a:9b:2c:be:a1:1a:bd:
                    a7:43:e2:13:93:26:57:94:4b:a4:34:8e:44:5f:68:
                    49:e3:e5:06:66:8c:23:b1:2f:ff:60:41:fe:42:2b:
                    c9:6c:a5:e5:ee:89:ce:d9:78:92:e8:4e:de:47:69:
                    f9:0a:03:94:f8:f7:ec:5e:fd:ca:a5:75:60:16:de:
                    5a:96:f4:08:4c:c8:3c:11:d6:de:1b:61:ba:49:17:
                    35:a1:28:06:5a:0f:ba:61:33:fb:b0:39:1d:3c:e9:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B2:49:53:8D:25:CE:68:B1:7A:13:13:B1:FD:B9:4C:5A:20:13:23
            X509v3 Authority Key Identifier:
                keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:51:98:0a:05:33:f3:e3:cc:86:1a:e8:4c:f2:29:6a:38:
         d8:b6:9b:f8:d6:86:28:c0:3b:69:8c:ce:ef:59:5a:59:99:39:
         81:9d:6c:ec:41:ae:6c:9e:1a:42:80:6d:ea:3c:bb:46:fe:dc:
         ef:9c:ee:33:fd:29:d8:cf:ab:3f:54:57:89:7c:20:3a:06:d1:
         50:9d:c8:09:50:47:b9:9e:01:1d:6d:47:89:8c:c0:19:fc:f5:
         2c:c0:82:01:9d:6e:f2:4a:9d:ae:89:27:97:0b:f3:bc:0c:ca:
         f8:0e:f6:f3:44:fd:4b:be:db:2f:3b:0b:a5:ac:1a:7b:22:64:
         bf:be:a3:f1:42:fc:9e:b4:de:1b:08:0d:92:c9:a8:13:78:b7:
         a0:8b:71:ad:da:aa:a4:da:33:95:f5:78:9e:b5:aa:e5:1c:80:
         65:69:2c:68:1a:1f:9f:93:36:b2:ca:81:f3:47:da:56:78:be:
         5c:06:2a:e7:ea:3d:22:73:a7:2a:1c:e6:ea:3b:73:d0:a1:33:
         8e:93:fe:9d:b1:4e:79:04:c2:84:92:15:c9:bc:12:17:f0:24:
         17:7c:75:da:5d:f3:27:83:a3:d2:c7:95:2a:04:7e:63:a9:90:
         8e:26:a4:2c:1b:e5:61:79:55:08:96:3a:09:4f:37:1a:14:e6:
         c9:75:ba:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw
RkVBQTAxRjgwHhcNMjYwODE4MTYwNTU2WhcNMjYwODI1MTYwNTU2WjAYMRYwFAYD
VQQDEw02YTg0ODJlNS1iNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+1u9+2Ul1o4KqeGSXzQBiwJCR6ev0rNxpnkbyvKfyXSkSRtJpdW9lHzuchL
o8gAwQ8qM80wE6eOVFbs+chpkVlHuAW0h8oNQdmfnQxyv6aSFnQZdTmVTjPVODsS
q2tjU1GQNmWHKCm59TvgX8fO55dUATDkxOnR6C3E4+c3z1rzLn1rTFnuHNTahGgO
YKMHP6iRIa9hbl34rFcNioqbLL6hGr2nQ+ITkyZXlEukNI5EX2hJ4+UGZowjsS//
YEH+QivJbKXl7onO2XiS6E7eR2n5CgOU+PfsXv3KpXVgFt5alvQITMg8EdbeG2G6
SRc1oSgGWg+6YTP7sDkdPOm/RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+ySVON
Jc5osXoTE7H9uUxaIBMjMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF
RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz
c3ZhdENkQTZsQTRQNnFBZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVlRmAoFM/PjzIYa6EzyKWo42Lab+NaGKMA7aYzO71laWZk5gZ1s7EGubJ4a
QoBt6jy7Rv7c75zuM/0p2M+rP1RXiXwgOgbRUJ3ICVBHuZ4BHW1HiYzAGfz1LMCC
AZ1u8kqdroknlwvzvAzK+A7280T9S77bLzsLpawaeyJkv76j8UL8nrTeGwgNksmo
E3i3oItxrdqqpNozlfV4nrWq5RyAZWksaBofn5M2ssqB80faVni+XAYq5+o9InOn
Khzm6jtz0KEzjpP+nbFOeQTChJIVybwSF/AkF3x12l3zJ4Oj0seVKgR+Y6mQjiak
LBvlYXlVCJY6CU83GhTmyXW6qQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:19 2026 by rpki-client